Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34cc8adf-189e-4a7a-bdf6-9fcee351baf1.roa
File:                     34cc8adf-189e-4a7a-bdf6-9fcee351baf1.roa (raw, json)
Hash identifier:          oCtYejaEPcRD7XUJ3jNvxK9IIP95sj+YA48PtbSQ3sk=
Subject key identifier:   55:9E:D6:DE:BE:93:F4:EB:42:80:89:A8:EF:B7:C3:CB:34:BB:C1:13
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       346B058C53234DE1B83FC7F389DAE01DC7D5FA51
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34cc8adf-189e-4a7a-bdf6-9fcee351baf1.roa
Signing time:             Sat 30 Aug 2025 00:51:05 +0000
ROA not before:           Sat 30 Aug 2025 00:51:05 +0000
ROA not after:            Sat 04 Oct 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        72.44.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6b:05:8c:53:23:4d:e1:b8:3f:c7:f3:89:da:e0:1d:c7:d5:fa:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 30 00:51:05 2025 GMT
            Not After : Oct  4 23:59:59 2025 GMT
        Subject: serialNumber=51d0367813709d2e4c7dda7347bef87e7961d5e44bf2c2e5f919cd3ceb0d0254, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:85:9e:a9:60:c3:16:37:69:8d:df:52:fb:41:
                    b1:13:84:4a:4b:fe:5c:43:fb:b0:88:e2:95:b0:1c:
                    52:42:7f:55:05:c4:68:84:6d:fb:0d:26:0d:11:8d:
                    24:a5:2f:ef:a3:63:7a:1d:5b:f3:ac:30:97:39:43:
                    5c:ab:1b:20:23:57:bc:75:34:69:49:76:76:d6:f9:
                    98:f2:61:54:87:6f:2d:9e:8f:32:5c:18:4b:c9:b9:
                    05:06:09:0f:8b:e0:9e:fa:8e:87:99:b8:e8:f6:e4:
                    30:2f:96:45:67:d1:5b:92:c5:2a:57:18:a3:d9:75:
                    f5:9c:e6:85:63:a8:ee:8d:b6:ec:d8:1c:a0:d4:ed:
                    3a:b7:97:bd:35:01:14:ee:77:c0:16:ef:ca:da:4f:
                    19:62:24:95:3c:d5:70:9f:00:c9:ad:f7:47:84:fb:
                    f5:5a:be:d6:b3:eb:5c:18:31:bd:c9:35:bc:c0:56:
                    33:00:ed:15:3e:2b:fc:aa:9e:8e:1c:e3:35:45:6c:
                    90:5e:72:cf:18:98:00:cc:31:44:a9:e7:ae:3f:e5:
                    c8:83:8b:c3:ba:60:a1:70:0c:da:b1:d7:d4:16:7a:
                    5f:2e:b1:4d:ae:89:a6:32:e6:2f:e5:d1:1d:72:2b:
                    aa:61:13:a7:d7:87:29:c6:cd:c3:29:a3:84:e6:b4:
                    90:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:9E:D6:DE:BE:93:F4:EB:42:80:89:A8:EF:B7:C3:CB:34:BB:C1:13
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34cc8adf-189e-4a7a-bdf6-9fcee351baf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.44.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         83:d2:a8:45:66:9f:78:fc:3c:76:a8:04:7a:8a:6a:23:26:6f:
         99:1b:5c:70:5d:bd:c9:5c:2a:ed:28:ce:c6:15:90:64:c1:bf:
         66:04:30:69:98:80:f3:89:c8:91:40:9b:61:58:c8:2c:9a:b5:
         95:7f:25:bb:ab:13:33:b0:c2:11:5a:a1:00:7f:84:ae:8c:a9:
         20:c7:65:5d:a5:00:75:fb:bf:1a:06:85:bd:9d:18:6a:aa:6a:
         41:65:24:63:f0:91:a4:84:7f:87:80:3a:ee:27:7d:7a:23:d8:
         13:81:88:b4:40:36:62:82:ff:d4:7d:20:c0:0f:c3:9a:28:37:
         29:82:58:6c:7f:c4:5b:db:05:a5:05:b3:af:84:f6:58:6d:41:
         64:e2:dd:10:b3:e8:94:1a:29:a8:14:fe:bc:0b:5d:c4:39:52:
         e3:c7:89:95:90:66:22:96:c3:b6:6f:3c:45:f1:11:ea:d7:c4:
         09:a5:02:44:78:5b:f2:95:b8:b4:4a:d4:52:2b:61:0c:ec:bb:
         84:4d:58:9f:49:75:be:ae:b0:6b:ed:a5:c5:88:2c:95:ef:15:
         01:82:98:af:ad:8e:dd:be:2f:00:52:c1:d8:bd:67:5c:bf:82:
         13:f8:9b:05:98:11:4e:98:37:1c:01:db:3c:e4:a7:75:b2:fc:
         c4:a0:02:10
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUNGsFjFMjTeG4P8fzidrgHcfV+lEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODMwMDA1MTA1WhcNMjUxMDA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MWQwMzY3ODEzNzA5ZDJlNGM3ZGRhNzM0N2JlZjg3ZTc5
NjFkNWU0NGJmMmMyZTVmOTE5Y2QzY2ViMGQwMjU0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCzhZ6pYMMWN2mN31L7QbEThEpL/lxD+7CI4pWwHFJCf1UF
xGiEbfsNJg0RjSSlL++jY3odW/OsMJc5Q1yrGyAjV7x1NGlJdnbW+ZjyYVSHby2e
jzJcGEvJuQUGCQ+L4J76joeZuOj25DAvlkVn0VuSxSpXGKPZdfWc5oVjqO6NtuzY
HKDU7Tq3l701ARTud8AW78raTxliJJU81XCfAMmt90eE+/Vavtaz61wYMb3JNbzA
VjMA7RU+K/yqno4c4zVFbJBecs8YmADMMUSp564/5ciDi8O6YKFwDNqx19QWel8u
sU2uiaYy5i/l0R1yK6phE6fXhynGzcMpo4TmtJAdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUVZ7W3r6T9OtCgImo77fDyzS7wRMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzM0Y2M4YWRmLTE4OWUtNGE3YS1iZGY2LTlmY2VlMzUxYmFmMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVILCAwDQYJKoZIhvcNAQELBQADggEBAIPSqEVmn3j8PHaoBHqKaiMmb5kb
XHBdvclcKu0ozsYVkGTBv2YEMGmYgPOJyJFAm2FYyCyatZV/JburEzOwwhFaoQB/
hK6MqSDHZV2lAHX7vxoGhb2dGGqqakFlJGPwkaSEf4eAOu4nfXoj2BOBiLRANmKC
/9R9IMAPw5ooNymCWGx/xFvbBaUFs6+E9lhtQWTi3RCz6JQaKagU/rwLXcQ5UuPH
iZWQZiKWw7ZvPEXxEerXxAmlAkR4W/KVuLRK1FIrYQzsu4RNWJ9Jdb6usGvtpcWI
LJXvFQGCmK+tjt2+LwBSwdi9Z1y/ghP4mwWYEU6YNxwB2zzkp3Wy/MSgAhA=
-----END CERTIFICATE-----
Generated at Sat Sep 6 14:08:45 2025 by rpki-client